India's CERT-In warns that CRAFTY FALCON hackers are stealing wallet keys
CERT-In's advisory on a campaign called CRAFTY FALCON says attackers hit some victims a second time after incomplete cleanups. Stolen crypto wallet keys are among the damage.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- India's cyber agency CERT-In issued an advisory on a campaign it calls CRAFTY FALCON.
- The advisory says victims were re-targeted after remediation was incomplete.
- Stolen crypto wallet keys are listed among the campaign's effects.
- The advisory points to AI-assisted attackers, per the source's headline.
India's national cyber agency, CERT-In, has issued an advisory on a hacking campaign it calls CRAFTY FALCON. Crypto wallet keys are among the things being stolen.
What the advisory says
We don't have much detail. CERT-In reports that attackers came back for a second round against some victims, because the first cleanup wasn't complete. Among the campaign's effects, it lists stolen crypto wallet keys. The headline I worked from calls the attackers AI-assisted, but the material I have doesn't say how AI is actually used.
There's plenty we don't know: how many victims, which sectors, what losses, what technical methods. That would all be in the full advisory, and I haven't seen it.
The re-targeting problem
This is the bit I'd stare at. Getting hacked once is bad. Getting hacked again because you only half-fixed the first breach? Worse. If an attacker keeps a foothold, pulling out one piece of malware or resetting one password may not end the intrusion.
Why it matters
A wallet key is the whole game. Whoever holds it controls the funds, and there's no help desk to reverse a transfer. If a device or account was ever compromised, treat any key that touched it as burned. Move your funds to a fresh wallet created on a clean device. Don't just change a password and hope. And if your business handles keys, a one-time cleanup won't cut it. Check that the attacker is really gone.
The open question for me is how much AI actually changes the attackers' success rate. The full advisory may answer it.
Source: CryptoSlate
Top Crypto Casinos Right Now
🇺🇸 Showing sites that accept players from United States Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-facing book that pays a premium for crypto deposits: 125% against 100% for cash, with fee-free deposits across five coins.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: BetNow's casino floor with the biggest match bonus we list. The 200% headline deserves a careful read of the code terms behind it.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
Priya Nair
Priya covers the AI side of crypto — agent tokens, decentralised compute and where the two industries actually meet.
Related News
CZ Wants a Crypto Security Alliance, Says AI Is Making Hackers Faster
Binance: Fake job interview and internal AI tool led to breach
CZ Warns AI Is Making Big Crypto Hacks Easier After Binance Heist
